Doxvora Privacy Policy

1. The short version

• We collect what is needed to run your account and your inspections: your account details, the inspection work you create (observations, photos, notes, diagrams, and reports), and your subscription status.
• Your work is stored on your device and synced to your account so you can reach it from your other devices. When you finalize a job, its complete record is archived in secure cloud storage.
• To draft report language, the text of your observations is sent to our AI provider. Photos are not sent to the AI.
• We use service providers for hosting, payments, AI, weather, and mapping. They are listed at the end of this policy. We do not sell your data, and we do not track you across other apps or websites.
• You can delete your account, along with its data on your device and in the cloud, from within the app at any time.

2. Information we collect

Account information. When you create an account we collect your email address and password (your password is stored only in hashed form by our authentication provider). In the app you may add your name, phone number, and a signature that appears on your reports.

Inspection content. Doxvora stores the inspections you perform: your observations, photographs, notes, the text transcribed on your device from your spoken observations, structure diagrams, and the reports produced from them.

Property and people. In the course of your work you enter details about the property and the parties to an inspection, such as a property address and the names, phone numbers, and email addresses of clients, owners, agents, or other parties. You are responsible for having a proper basis to provide this information; we process it on your behalf to produce your reports.

Photos and metadata. Photos you capture or import are stored with the inspection. When you allow location access, Doxvora stamps the GPS coordinates of where a photo was taken into the photo's metadata, so your own record shows where each photo came from. Doxvora reads your location only at the moment you take a photo. It never reads your location continuously, in the background, or to track your movement.

Voice transcription. When you dictate an observation, your speech is transcribed to text on your device, as you speak. The transcript is what Doxvora keeps. No audio recording is stored, synced, or uploaded. Your microphone stays active while you are recording, including when the app is in the background, so it can keep transcribing until you stop, but only the text is saved.

Billing information. Subscriptions are sold and managed on our website through our payment provider. Your payment card is collected and processed by that provider. Doxvora does not receive or store your full card details. We store your subscription status and the plan you are on.

Usage records. We record when a report is shared, in order to apply your plan. Doxvora does not use third-party advertising or analytics tools.

3. How we use information

We use the information above to provide the app: to store your inspections, generate and deliver your reports, sync your work across your devices, and preserve finalized inspection records; to operate your account and billing (authentication, subscription status, and support); to draft and organize your reports, as described in section 5; and to provide support and diagnose problems.

4. Who we share information with

We share data only with service providers who process it on our behalf to operate Doxvora. They act on our instructions and may not use your data for their own purposes. The categories are:

• Cloud backend. Authentication, database, file storage, and the server functions that run the app.
• AI drafting. The text of your observations is sent to a third-party AI provider to draft report language, place findings in the correct sections, and run coverage checks.
• Payment processing. Subscription payments are handled by our payment provider on our website. Your card details are collected and stored by that provider, not by Doxvora.
• Weather. Local conditions are retrieved from a weather-data provider using the city in a property address.
• Mapping. Aerial imagery for the structure diagram is retrieved from a mapping provider based on the property location.

The providers in each category are named at the end of this policy. We do not sell your personal information, and we do not share it for advertising.

5. How your inspection content is processed by AI

To turn your narration into an organized report, the text of your observations is sent to our AI provider through a secured server, which drafts report language, places findings in the correct sections, and runs coverage checks. Photos are not sent to the AI provider. Only text is. Under our provider's terms, data sent through the API is not used to train their models. The AI standardizes language for observations you actually made; it does not invent observations.

6. Where your data lives; sync and archiving

Doxvora is built local-first: your active work is stored on your device and synced to your account so you can reach it from your other devices. When you finalize a job, the complete inspection record is uploaded to secure cloud storage and kept there for you. Your information is processed and stored in the United States.

7. Your clients' information

Your inspections contain personal information about your clients and the property, such as names, addresses, and contact details you enter. You are responsible for that information and for your relationship with your clients. Doxvora stores and processes it on your behalf to provide the sync, reporting, and archive features. You are responsible for retaining your own inspection records as required by law and your licensing authority.

8. Data retention and deletion

On your device. Your finished reports remain on your device. Doxvora does not automatically remove them. You can delete a report yourself, and deleting your account removes them.

In the cloud. When you finalize a job, its complete inspection record is retained in secure cloud storage so it stays available if an observation is later questioned. Doxvora does not automatically delete your records. They remain until you delete them or delete your account. How long to keep your records is your decision; Doxvora does not set or advise a retention period.

Account deletion. You can delete your account at any time from the app, under Account, then Delete account. Deleting your account permanently removes your account and its data, on the device and in the cloud, and cancels any subscription. If you use Doxvora on more than one device, the others are wiped the next time they come online. This cannot be undone.

When you delete your account we remove your data; we keep a limited technical record used only to prevent fraud and abuse.

9. Security

Data is encrypted in transit, and access to your data is restricted to your account. Your sign-in session is stored securely on your device, in the iOS Keychain, optionally protected by Face ID or Touch ID. AI processing routes through an authenticated server, so no third-party AI keys are stored on your device. No system is perfectly secure, but we work to safeguard your data.

10. Your choices and rights

• Your profile. Review and update your profile in the app.
• Permissions. Change or revoke device permissions (camera, microphone, location, photos) at any time in iOS Settings under Doxvora. Declining location only removes location metadata from photos and the weather lookup.
• Deletion. Delete your account and its data from within the app, under Account, then Delete account.

Depending on where you live, you may have additional rights to access or delete personal information. Contact us at privacy@doxvora.com to exercise them.

11. Children

Doxvora is a professional tool intended for licensed inspectors. It is not directed to children under 16, and we do not knowingly collect their personal information.

12. Changes to this policy

We may update this policy as the app changes. We will post the new version here with a new effective date and, for material changes, provide reasonable notice.

13. Contact

Questions about this policy or your data: privacy@doxvora.com

14. Service providers

We use the following service providers to operate Doxvora. Each processes data on our behalf, under our instructions, and may not use it for its own purposes. We may change providers within a category over time.

• Cloud backend. Supabase (authentication, database, file storage, server functions).
• AI drafting. Anthropic.
• Payment processing. Stripe.
• Weather data. Open-Meteo.
• Mapping and aerial imagery. Google Maps Platform.
• App distribution. Apple.